Change 'defaults' to 'starter site' #2176
Conversation
rosiel
changed the title
|
Question for the Tech team: What is the purpose of installing Drupal at /opt/drupal? Every other method we have puts it in /var/www/drupal or /var/www/html/drupal. Should we keep the manual instructions doing something so different? Also, comments on the work thus far are welcome. I am not done with the Manual Install instructions yet. |
|
Nevermind the above comment. I'm going to mark the "manual install" pages with a warning that they are in need of review. Perfecting them is out of scope of this PR. |
| @@ -146,9 +146,8 @@ Sites concerned with access control wish to "lock down" their Fedora to only be | |||
|
|
|||
| ## Access control in the Triplestore | |||
|
|
|||
| In Islandora Defaults, there is no access control on the Blazegraph triplestore. Islandora defaults is configured so that all RDF triples sent to Fedora are also populated into the triplestore. If using the Ansible Playbook, it is available at http://localhost:8080/bigdata/. Like the solr index, it is open to the world by default. | |||
|
|
|||
| In a site created with ISLE or the Islandora Playbook, there is no access control on the Blazegraph triplestore. The Islandora Starter Site configuration is such that all RDF triples sent to Fedora are also populated into the triplestore. Like the solr index, it is open to the world by default. | |||
There was a problem hiding this comment.
By default on ISLE the Blazegraph GUI is not accessible. The port would need to be exposed in the environment file.
There was a problem hiding this comment.
You're totally right. The ISLE docs say you can explore them at traefik.me URLs, but at least since 10 months ago they're not exposed.
There was a problem hiding this comment.
Does the new verbiage work for you? My concern is that any site created before Dec 2021 did not have this available. I am also not clear on whether it's possible to "update isle-dc" to make these options available on an existing site, or if doing that would involve destructive changes that would not be advisable on existing sites.
Anyone with access to Blazegraph can access all the repository information within Blazegraph. If this is not desired, you should restrict access to the Blazegraph endpoint and GUI. By default, the Islandora Playbook exposes Blazegraph at
http://localhost:8080/bigdata/. ISLE-DC on the other hand can expose or not expose individual services, including Blazegraph. Since December 2021 this has been available as an option in the.envfile and since that time, Blazegraph (and some other services) are not exposed by default.
There was a problem hiding this comment.
I hope I wasn't being to picky with the phrasing and your concern is absolutely valid too. I do like how you reworded it now. I only brought it up because the question of exposing those services has come up a few times in slack this year. It shouldn't be destructive to existing sites data to make the change but it may make the site temporarily unavailable in order to pull in the changes.
|
Thanks @aOelschlager! Anyone who can see the big green button is free to squash-and-merge. |
Purpose / why
Move references from "Islandora Defaults" to "Islandora Starter Site"
What changes were made?
Verification
Read it through, is it grammatical and free of spelling errors?
For install instructions: do they work?
Interested Parties
Checklist
Pull-request Reviewer
Pull-request reviewer should ensure the following:
Person Merging
The person merging should ensure the following: